[satz333]

If you do not already know, Google can be used by malicious person to hack websites, servers, credit cards, and ………..


Ohhh yes, Google is the best friend of hackers, using what is called GOOGLE DORKS, a hacker can easily find exploitable vulnerabilities and mount attacks that will allow access to the vulnerable target.


Google dorks are a combination of words used as search keyword.


The Google Hacking Database (GHDB)
For more information follow the link: http://www.exploit-db.com/google-hac...tabase-reborn/


Now time to demonstrate the power of the Google Hacking Database,

We start by choosing a dork, in this example I'll use:


filetypeql "insert into" (pass|passwd|password)
&
filetypeql ("values * MD5" | "values * password" | "values * encrypt")


Ok, now let's see the result: filetypeql insert into users


As you can see, we come across databases dump, and we can clearly see the username and the password, but unfortunately the passwords may be encrypted

The solution is to combine the two dorks: filetypeql insert into users values MD5


Now we see the username and password "NON-ENCRYPTED"


To find specified targets you can tweak your dork, for example if you want to find database dump of a content management system (Drupal, Joomla, ……), all you have to do is to add the table name;


ok try this one (Joomla):
filetypeql insert into jos_users values md5

[TheShadow1]

Awesome TUT. Thanks! I forgot how awesome the Google Hacks DB is.

[satz333]

Awesome TUT. Thanks! I forgot how awesome the Google Hacks DB is.

Hey Kool M8.. Anyways Appie hacking :thumbs:

[horaceallen77]

bro

you are doing good

good job

[Arthur555]

Wow O.O Never thought that google was so helpful for hacking ^_^'

[satz333]

bro

you are doing good

good job

Thnx Keep Supporting..

[Shining White]

Great job dude.., Awesome !!!

[jsavanto]

The password I got is encrypted. I don't know how to combine the two dorks because you did not explain that part. Please help

[satz333]

yea thnx for your replies buddies..

[ibnea]

I got encrypted password.
what the next should i do?